IoT Security Threat Models and Security Model

Skip to content

Threat Modeling: Identifying Right-size Security for your IoT Product

Understand the assets, threats, and counter-measures needed for your specific product, and embed security into every element and process during product development.

Threat Modeling and the Platform Security Model help you create products with right-size security, and ensure you aren’t over-spending on security nor exposing your device, organization or customers to unnecessary risk.

Learn more

Getting Started with Threat Modeling

The PSA Certified founders have provided threat model and security analysis (TMSA) documents for five use cases. These editable documents follow a systematic process for threat modeling. A device manufacturer can download these examples and adapt them to create a threat model and security analysis document for their own specific use case.

Aligning to Security Best Practices

Alongside use case-specific requirements, PSA Certified outlines top-level requirements for IoT products, sharing 10 Security Goals that should be implemented and considered in all IoT components.

Learn more

The 10 Security Goals are outlined in the Platform Security Model document. More information about how the 10 Security Goals were defined can be found in the Platform Threat Model and Security Goals document.

PSA Certified
Training Course

Online Training

Learn about IoT security fundamentals
and the PSA Certified scheme

Explore now

Security Specifications and Reference Implementations

Using the threat model and 10 Security Goals, the security requirements should have been identified. The PSA Certified ecosystem contribute freely available architecture specifications for firmware and hardware to design-in security and build trust.

Learn more